Google Professional Cloud Developer Question 218
Select 3Google Cloud PlatformYou are a developer tasked with setting up a robust development environment for your team using Google Cloud Workstations. The team requires the following: pre-configured IDEs, secure access to Google Cloud resources, and the ability to share workstation configurations across the team. Which of the following steps should you take to meet these requirements?
- A
Create a workstation configuration with pre-installed IDEs and define the machine type and container image.
- B
Enable private endpoint access for the workstation to ensure secure access to Google Cloud resources.
- C
Allow team members to access the workstation configuration by granting them the 'Viewer' role on the project.
- D
Use a custom container image with pre-configured development tools and push it to Google Container Registry.
- E
Enable the Cloud Workstations API and create a policy to enforce SSH-based access for additional security.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements, you need to create a shared workstation configuration with pre-installed IDEs and development tools, ensure secure access to Google Cloud resources via private endpoints, and use a custom container image to maintain consistency. Granting the 'Viewer' role does not allow team members to share configurations, and SSH-based access is not aligned with best practices for Cloud Workstations.
- A. Correct.
Correct: Creating a workstation configuration allows you to predefine IDEs, machine types, and container images, ensuring all team members share the same environment.
- B. Correct.
Correct: Enabling private endpoint access ensures secure connectivity to Google Cloud resources by restricting access to private networks.
- C. Incorrect.
Incorrect: Granting the 'Viewer' role provides read-only access to resources but does not allow team members to use or share workstation configurations.
- D. Correct.
Correct: Using a custom container image lets you include all necessary development tools, ensuring consistency across the team, and storing it in Google Container Registry makes it accessible.
- E. Incorrect.
Incorrect: While enabling the Cloud Workstations API is required, enforcing SSH-based access is not a common or recommended practice for Cloud Workstations, as it supports more modern and secure methods.